$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa File: 9f731a2d-1419-3edf-98fe-0b7c640c3642.roa (raw, json) Hash identifier: Q40lmjtLyXMAmB25qPmhRuTz7+UUFSVaoRhB3cUN4kA= Subject key identifier: CB:11:70:4C:D3:FC:0C:BD:72:9A:17:1D:9C:E8:9F:15:2E:3E:6E:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7F74E56AEED95885EA400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.60.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:f7:4e:56:ae:ed:95:88:5e:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=64f7d0c4-0b6b-4d9c-89e0-1e1a8897fd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:42:85:38:56:29:c5:5e:cb:3d:f8:46:5a: 6b:93:e2:e2:67:17:7e:5c:e4:5f:af:f5:3c:7c:1e: c6:37:b3:8c:f1:95:f9:9f:31:2e:a9:bf:34:83:14: e6:7a:77:ad:dc:54:bd:3c:00:ef:cf:61:ca:4b:8a: c9:a1:97:d9:d7:b0:4b:25:74:55:64:9d:a3:cb:86: 71:02:b5:3e:0d:d3:d8:54:97:52:4d:d4:6a:b4:76: 0d:cf:1c:81:46:a1:d1:21:02:03:24:b4:20:6d:e7: b6:28:87:7a:7d:74:f8:d3:73:d4:64:0e:91:9b:44: d1:33:83:e1:9d:ec:e9:32:28:1f:57:bf:0c:91:7b: a7:42:b7:84:85:2a:11:84:ea:92:bb:5d:4b:9a:1f: 5d:fe:96:65:11:3a:59:ca:f4:a1:44:98:a4:77:a0: 9b:0b:c5:f1:41:91:fd:f0:01:1d:f4:fc:79:c6:fb: c3:b2:8e:30:42:1e:60:88:3b:76:45:dd:d8:9b:4c: 09:79:c5:94:e7:35:50:5c:f4:ab:d8:81:4c:fd:d9: ff:ab:15:38:b4:de:be:d4:97:4e:c4:7e:10:62:22: 0d:78:ce:47:2c:4b:ae:fa:b4:66:66:55:e7:19:97: 14:78:d6:50:0d:b8:e7:ee:12:cf:69:32:82:ba:7c: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:11:70:4C:D3:FC:0C:BD:72:9A:17:1D:9C:E8:9F:15:2E:3E:6E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f731a2d-1419-3edf-98fe-0b7c640c3642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.60.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:a4:36:cd:0f:39:3d:3d:c8:65:88:e5:cf:49:bf:fb:fa:83: 9c:f0:16:37:8b:3e:6a:90:88:28:a3:72:e0:2e:cb:dd:e0:4d: 15:e0:20:c7:23:ac:bd:65:46:e4:30:34:b7:3f:46:a7:68:c3: e3:04:ec:e7:f1:c5:44:97:44:91:58:dd:e9:d5:41:62:bc:0f: cb:55:1c:b9:31:b1:4b:36:29:76:8a:7c:2b:bf:9a:28:37:ef: 3d:b2:bc:ef:ff:b4:92:eb:23:f0:dd:fc:44:85:26:27:86:7a: 82:32:35:83:15:f9:e8:1c:6e:34:d9:f0:17:c4:c7:d1:55:0a: f6:10:f0:0b:76:ae:71:92:93:68:d5:ea:0e:c7:d2:9c:1f:a7: 12:82:82:99:3b:22:60:04:99:b2:8a:fc:00:3d:9c:83:01:56: b7:b4:a3:ed:77:73:d4:17:88:35:4d:80:ba:ae:72:33:05:ba: f9:de:ba:00:bf:5c:42:5e:f6:36:1a:61:c6:cb:bd:91:ed:0d: 20:5a:4e:04:bf:8f:4d:17:d4:be:64:64:3b:ca:dd:8c:33:1b: 22:66:fe:6d:05:98:39:78:3a:f1:55:6d:0f:d7:2f:9a:8f:fd: c4:ec:e9:16:a6:cb:5b:63:64:57:de:bc:73:22:a2:bd:37:c1: 5e:e4:72:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp/dOVq7tlYhepAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjRmN2QwYzQtMGI2Yi00ZDljLTg5ZTAtMWUxYTg4OTdmZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGpChThWKcVeyz34Rlprk+LiZxd+XORfr/U8 fB7GN7OM8ZX5nzEuqb80gxTmenet3FS9PADvz2HKS4rJoZfZ17BLJXRVZJ2jy4Zx ArU+DdPYVJdSTdRqtHYNzxyBRqHRIQIDJLQgbee2KId6fXT403PUZA6Rm0TRM4Ph nezpMigfV78MkXunQreEhSoRhOqSu11Lmh9d/pZlETpZyvShRJikd6CbC8XxQZH9 8AEd9Px5xvvDso4wQh5giDt2Rd3Ym0wJecWU5zVQXPSr2IFM/dn/qxU4tN6+1JdO xH4QYiINeM5HLEuu+rRmZlXnGZcUeNZQDbjn7hLPaTKCunz6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsRcEzT/Ay9cpoXHZzonxUuPm7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY3MzFhMmQtMTQxOS0z ZWRmLTk4ZmUtMGI3YzY0MGMzNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMikNs0POT09yGWI5c9Jv/v6g5zwFjeLPmqQiCijcuAuy93gTRXgIMcj rL1lRuQwNLc/Rqdow+ME7OfxxUSXRJFY3enVQWK8D8tVHLkxsUs2KXaKfCu/mig3 7z2yvO//tJLrI/Dd/ESFJieGeoIyNYMV+egcbjTZ8BfEx9FVCvYQ8At2rnGSk2jV 6g7H0pwfpxKCgpk7ImAEmbKK/AA9nIMBVre0o+13c9QXiDVNgLqucjMFuvneugC/ XEJe9jYaYcbLvZHtDSBaTgS/j00X1L5kZDvK3YwzGyJm/m0FmDl4OvFVbQ/XL5qP /cTs6Ramy1tjZFfevHMior03wV7kcqo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:56 2025 by rpki-client